From 6fb6d308adda3fdbbeeaa889324a4899955cb05c Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Mon, 22 Apr 2024 23:10:10 +0000
Subject: [PATCH] Publish Advisories

GHSA-393x-fr59-r8fg
GHSA-8cp3-66vr-3r4c
GHSA-p739-9479-5wr2
GHSA-vmqq-7qvx-68qx
GHSA-393x-fr59-r8fg
GHSA-8cp3-66vr-3r4c
GHSA-vmqq-7qvx-68qx
---
 .../GHSA-393x-fr59-r8fg.json                  | 57 +++++++++++++++
 .../GHSA-8cp3-66vr-3r4c.json                  | 73 +++++++++++++++++++
 .../GHSA-p739-9479-5wr2.json                  | 29 ++++++--
 .../GHSA-vmqq-7qvx-68qx.json                  | 61 ++++++++++++++++
 .../GHSA-393x-fr59-r8fg.json                  | 38 ----------
 .../GHSA-8cp3-66vr-3r4c.json                  | 38 ----------
 .../GHSA-vmqq-7qvx-68qx.json                  | 39 ----------
 7 files changed, 215 insertions(+), 120 deletions(-)
 create mode 100644 advisories/github-reviewed/2022/05/GHSA-393x-fr59-r8fg/GHSA-393x-fr59-r8fg.json
 create mode 100644 advisories/github-reviewed/2022/05/GHSA-8cp3-66vr-3r4c/GHSA-8cp3-66vr-3r4c.json
 rename advisories/{unreviewed => github-reviewed}/2022/05/GHSA-p739-9479-5wr2/GHSA-p739-9479-5wr2.json (52%)
 create mode 100644 advisories/github-reviewed/2022/05/GHSA-vmqq-7qvx-68qx/GHSA-vmqq-7qvx-68qx.json
 delete mode 100644 advisories/unreviewed/2022/05/GHSA-393x-fr59-r8fg/GHSA-393x-fr59-r8fg.json
 delete mode 100644 advisories/unreviewed/2022/05/GHSA-8cp3-66vr-3r4c/GHSA-8cp3-66vr-3r4c.json
 delete mode 100644 advisories/unreviewed/2022/05/GHSA-vmqq-7qvx-68qx/GHSA-vmqq-7qvx-68qx.json

diff --git a/advisories/github-reviewed/2022/05/GHSA-393x-fr59-r8fg/GHSA-393x-fr59-r8fg.json b/advisories/github-reviewed/2022/05/GHSA-393x-fr59-r8fg/GHSA-393x-fr59-r8fg.json
new file mode 100644
index 00000000000..5e6a44ed229
--- /dev/null
+++ b/advisories/github-reviewed/2022/05/GHSA-393x-fr59-r8fg/GHSA-393x-fr59-r8fg.json
@@ -0,0 +1,57 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-393x-fr59-r8fg",
+  "modified": "2024-04-22T23:08:32Z",
+  "published": "2022-05-13T01:32:20Z",
+  "aliases": [
+    "CVE-2018-3771"
+  ],
+  "summary": "statics-server Cross-site Scripting vulnerability",
+  "details": "An XSS in statics-server <= 0.0.9 can be used via injected iframe in the filename when statics-server displays directory index in the browser. Statics-server does not implement any HTML escaping when displays directory index in the browser. Variable `v` is used in `<a href>` element without escaping, which allows to embed HTML `<iframe>` tag with `src` attribute points to another HTML file in the directory. This file can contain malicious JavaScript code, which will be executed:\n\n```js\n// ./node_modules/statics-server/index.js, line 18:\n\n    if(fs.lstatSync(staticPath).isDirectory()){\n        var files=fs.readdirSync(staticPath);\n        var lis='';\n        files.forEach((v,i)=>{\n            if(fs.lstatSync(path.resolve(staticPath,v)).isDirectory()){\n                lis+=`<li><a href=\"${req.url}${v}/\">${v}/</a></li>`;\n            }else {\n                lis+=`<li><a href=\"${req.url}${v}\">${v}</a></li>`\n            }\n        });\n\n        (...)\n```",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "npm",
+        "name": "statics-server"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "last_affected": "0.0.9"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-3771"
+    },
+    {
+      "type": "WEB",
+      "url": "https://hackerone.com/reports/355458"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-04-22T23:08:32Z",
+    "nvd_published_at": "2018-07-20T22:29:00Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/github-reviewed/2022/05/GHSA-8cp3-66vr-3r4c/GHSA-8cp3-66vr-3r4c.json b/advisories/github-reviewed/2022/05/GHSA-8cp3-66vr-3r4c/GHSA-8cp3-66vr-3r4c.json
new file mode 100644
index 00000000000..6cc69318f7d
--- /dev/null
+++ b/advisories/github-reviewed/2022/05/GHSA-8cp3-66vr-3r4c/GHSA-8cp3-66vr-3r4c.json
@@ -0,0 +1,73 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8cp3-66vr-3r4c",
+  "modified": "2024-04-22T23:08:07Z",
+  "published": "2022-05-17T00:01:45Z",
+  "aliases": [
+    "CVE-2022-29622"
+  ],
+  "summary": "Formidable arbitrary file upload",
+  "details": "An arbitrary file upload vulnerability in formidable v3.1.4 allows attackers to execute arbitrary code via a crafted filename.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "npm",
+        "name": "formidable"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "3.2.4"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-29622"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/node-formidable/formidable/issues/856"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/node-formidable/formidable/pull/857"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gitlab.com/keymandll/blog/-/blob/master/posts/03062022-Invulnerability_Analysis-CVE-2022%E2%80%9329622/index.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://portswigger.net/daily-swig/researcher-defends-formidable-in-fight-against-critical-cve-vulnerability-assignment"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.youtube.com/watch?v=C6QPKooxhAo"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-434"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-04-22T23:07:47Z",
+    "nvd_published_at": "2022-05-16T14:15:00Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2022/05/GHSA-p739-9479-5wr2/GHSA-p739-9479-5wr2.json b/advisories/github-reviewed/2022/05/GHSA-p739-9479-5wr2/GHSA-p739-9479-5wr2.json
similarity index 52%
rename from advisories/unreviewed/2022/05/GHSA-p739-9479-5wr2/GHSA-p739-9479-5wr2.json
rename to advisories/github-reviewed/2022/05/GHSA-p739-9479-5wr2/GHSA-p739-9479-5wr2.json
index 0607ca0bba1..6b9257349f7 100644
--- a/advisories/unreviewed/2022/05/GHSA-p739-9479-5wr2/GHSA-p739-9479-5wr2.json
+++ b/advisories/github-reviewed/2022/05/GHSA-p739-9479-5wr2/GHSA-p739-9479-5wr2.json
@@ -1,12 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-p739-9479-5wr2",
-  "modified": "2022-05-13T01:11:22Z",
+  "modified": "2024-04-22T23:09:03Z",
   "published": "2022-05-13T01:11:22Z",
   "aliases": [
     "CVE-2017-1000170"
   ],
-  "details": "jqueryFileTree 2.1.5 and older Directory Traversal",
+  "summary": "jqueryFileTree vulnerable to Directory Traversal",
+  "details": "jqueryFileTree 2.1.5 and older is vulnerable to Directory Traversal\n\n### POC:\n```bash\ncurl 'http://localhost:8000/js/jqueryfiletree-2.1.5/dist/connectors/jqueryFileTree.php' -H 'Referer: xxx' -d \"dir=/\"\n```",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -14,7 +15,25 @@
     }
   ],
   "affected": [
-
+    {
+      "package": {
+        "ecosystem": "npm",
+        "name": "jqueryfiletree"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "last_affected": "2.1.5"
+            }
+          ]
+        }
+      ]
+    }
   ],
   "references": [
     {
@@ -35,8 +54,8 @@
       "CWE-22"
     ],
     "severity": "HIGH",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-04-22T23:09:03Z",
     "nvd_published_at": "2017-11-17T18:29:00Z"
   }
 }
\ No newline at end of file
diff --git a/advisories/github-reviewed/2022/05/GHSA-vmqq-7qvx-68qx/GHSA-vmqq-7qvx-68qx.json b/advisories/github-reviewed/2022/05/GHSA-vmqq-7qvx-68qx/GHSA-vmqq-7qvx-68qx.json
new file mode 100644
index 00000000000..849ca66d0d4
--- /dev/null
+++ b/advisories/github-reviewed/2022/05/GHSA-vmqq-7qvx-68qx/GHSA-vmqq-7qvx-68qx.json
@@ -0,0 +1,61 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-vmqq-7qvx-68qx",
+  "modified": "2024-04-22T23:09:42Z",
+  "published": "2022-05-24T17:09:13Z",
+  "aliases": [
+    "CVE-2019-10791"
+  ],
+  "summary": "promise-probe OS command injection vulnerability",
+  "details": "promise-probe before 0.10.0 allows remote attackers to perform a command injection attack. The `file`, `outputFile` and `options` functions can be controlled by users without any sanitization.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "npm",
+        "name": "promise-probe"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "0.1.10"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10791"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/dottgonzo/node-promise-probe/commit/0d9affb67fc1ad985903536d35372cf55efe5a45"
+    },
+    {
+      "type": "WEB",
+      "url": "https://snyk.io/vuln/SNYK-JS-PROMISEPROBE-546816"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-78"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-04-22T23:09:42Z",
+    "nvd_published_at": "2020-02-18T17:15:00Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2022/05/GHSA-393x-fr59-r8fg/GHSA-393x-fr59-r8fg.json b/advisories/unreviewed/2022/05/GHSA-393x-fr59-r8fg/GHSA-393x-fr59-r8fg.json
deleted file mode 100644
index af51cabe17b..00000000000
--- a/advisories/unreviewed/2022/05/GHSA-393x-fr59-r8fg/GHSA-393x-fr59-r8fg.json
+++ /dev/null
@@ -1,38 +0,0 @@
-{
-  "schema_version": "1.4.0",
-  "id": "GHSA-393x-fr59-r8fg",
-  "modified": "2022-05-13T01:32:20Z",
-  "published": "2022-05-13T01:32:20Z",
-  "aliases": [
-    "CVE-2018-3771"
-  ],
-  "details": "An XSS in statics-server <= 0.0.9 can be used via injected iframe in the filename when statics-server displays directory index in the browser.",
-  "severity": [
-    {
-      "type": "CVSS_V3",
-      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
-    }
-  ],
-  "affected": [
-
-  ],
-  "references": [
-    {
-      "type": "ADVISORY",
-      "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-3771"
-    },
-    {
-      "type": "WEB",
-      "url": "https://hackerone.com/reports/355458"
-    }
-  ],
-  "database_specific": {
-    "cwe_ids": [
-      "CWE-79"
-    ],
-    "severity": "MODERATE",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
-    "nvd_published_at": "2018-07-20T22:29:00Z"
-  }
-}
\ No newline at end of file
diff --git a/advisories/unreviewed/2022/05/GHSA-8cp3-66vr-3r4c/GHSA-8cp3-66vr-3r4c.json b/advisories/unreviewed/2022/05/GHSA-8cp3-66vr-3r4c/GHSA-8cp3-66vr-3r4c.json
deleted file mode 100644
index 51937b0f002..00000000000
--- a/advisories/unreviewed/2022/05/GHSA-8cp3-66vr-3r4c/GHSA-8cp3-66vr-3r4c.json
+++ /dev/null
@@ -1,38 +0,0 @@
-{
-  "schema_version": "1.4.0",
-  "id": "GHSA-8cp3-66vr-3r4c",
-  "modified": "2022-05-25T00:00:22Z",
-  "published": "2022-05-17T00:01:45Z",
-  "aliases": [
-    "CVE-2022-29622"
-  ],
-  "details": "An arbitrary file upload vulnerability in formidable v3.1.4 allows attackers to execute arbitrary code via a crafted filename.",
-  "severity": [
-    {
-      "type": "CVSS_V3",
-      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
-    }
-  ],
-  "affected": [
-
-  ],
-  "references": [
-    {
-      "type": "ADVISORY",
-      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-29622"
-    },
-    {
-      "type": "WEB",
-      "url": "https://www.youtube.com/watch?v=C6QPKooxhAo"
-    }
-  ],
-  "database_specific": {
-    "cwe_ids": [
-      "CWE-434"
-    ],
-    "severity": "CRITICAL",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
-    "nvd_published_at": "2022-05-16T14:15:00Z"
-  }
-}
\ No newline at end of file
diff --git a/advisories/unreviewed/2022/05/GHSA-vmqq-7qvx-68qx/GHSA-vmqq-7qvx-68qx.json b/advisories/unreviewed/2022/05/GHSA-vmqq-7qvx-68qx/GHSA-vmqq-7qvx-68qx.json
deleted file mode 100644
index 2118f50033a..00000000000
--- a/advisories/unreviewed/2022/05/GHSA-vmqq-7qvx-68qx/GHSA-vmqq-7qvx-68qx.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
-  "schema_version": "1.4.0",
-  "id": "GHSA-vmqq-7qvx-68qx",
-  "modified": "2022-05-24T17:09:13Z",
-  "published": "2022-05-24T17:09:13Z",
-  "aliases": [
-    "CVE-2019-10791"
-  ],
-  "details": "promise-probe before 0.10.0 allows remote attackers to perform a command injection attack. The file, outputFile and options functions can be controlled by users without any sanitization.",
-  "severity": [
-
-  ],
-  "affected": [
-
-  ],
-  "references": [
-    {
-      "type": "ADVISORY",
-      "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10791"
-    },
-    {
-      "type": "WEB",
-      "url": "https://github.com/dottgonzo/node-promise-probe/commit/0d9affb67fc1ad985903536d35372cf55efe5a45,"
-    },
-    {
-      "type": "WEB",
-      "url": "https://snyk.io/vuln/SNYK-JS-PROMISEPROBE-546816"
-    }
-  ],
-  "database_specific": {
-    "cwe_ids": [
-
-    ],
-    "severity": "HIGH",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
-    "nvd_published_at": "2020-02-18T17:15:00Z"
-  }
-}
\ No newline at end of file